Messages

1

Intrusion Detection and Prevention / IDS and VoIP Audio

« on: May 25, 2022, 03:48:57 pm »

Does anyone know of any particular IDS rules that will block VoIP call audio that I shouldn't enable?

2

22.1 Legacy Series / Re: [Tutorial/Call for Testing] Enabling Receive Side Scaling on OPNsense

« on: January 25, 2022, 09:11:36 pm »

Does this work with a VMware VMX NIC Interface VMXNet3?

Running OPNsense in a VM on ESXi 7.0 U3

3

21.1 Legacy Series / Re: RADIUS Error PHP 76

« on: March 31, 2021, 12:29:34 pm »

It seems that we have a small regression in our latest release, to fix the authentication tester, can you try to patch using https://github.com/opnsense/core/commit/a7ae8c4373d66984a83ab29e2fa0db3bfe0b922d ?

On a console, just run the following command and try the tester again:

Code: [Select]

opnsense-patch a7ae8c4

Best regards,

Ad

That seems to have fixed that error. At the very least OPNsense no longer says "A problem has been detected"

Thanks!

4

21.1 Legacy Series / RADIUS Error PHP 76

« on: March 30, 2021, 08:24:43 pm »

I just started getting this error after updating today to .4 

When using Microsoft Azure MFA through a local Windows RADIUS Server.   Previously it would send an Approval popup to the Microsoft Authenticator app on my cell phone. Now it just logs me right in and then grabs this PHP error in the log.

PHP Errors:
[30-Mar-2021 14:16:59 America/New_York] PHP Fatal error:  Uncaught Error: Call to undefined method OPNsense\Auth\Radius::getLastAuthErrors() in /usr/local/www/diag_authentication.php:76
Stack trace:
#0 {main}
  thrown in /usr/local/www/diag_authentication.php on line 76
[30-Mar-2021 14:21:00 America/New_York] PHP Fatal error:  Uncaught Error: Call to undefined method OPNsense\Auth\Radius::getLastAuthErrors() in /usr/local/www/diag_authentication.php:76
Stack trace:
#0 {main}
  thrown in /usr/local/www/diag_authentication.php on line 76

5

20.7 Legacy Series / Resize OPNSense Partition

« on: September 22, 2020, 04:32:13 pm »

Question about OPNSense Partition Expansion. 

I have the paid Business Edition OPNSense and I deployed it to VMWware using the OVF Package.

However, the deployment has a small primary partition size.

If I resize the allocated partition size in vCenter. Is there a simple way to expand the partition size in the FreeBSD shell for OPNsense?  Short of reinstalling everything including plug ins and reimporting config on a custom install.

6

20.7 Legacy Series / PHP Error phpDynDNS.inc

« on: September 17, 2020, 09:39:40 pm »

PHP Warning:  Invalid argument supplied for foreach() in /usr/local/etc/inc/plugins.inc.d/dyndns/phpDynDNS.inc on line 838

I've been seeing this problem detected a lot lately.

7

20.7 Legacy Series / Re: Call for testing: official netmap kernel

« on: September 17, 2020, 04:37:10 am »

I only have a free license in a home learning / testing environment but thanks for the info.

Register for https://sunnyvalley.cloud and you'll find a surprise You can get a trial license for 7 days now - will be publicly announced next week.

Is the trial license the surprise lol

Sent from my SM-N986U using Tapatalk

8

20.7 Legacy Series / Re: Call for testing: official netmap kernel

« on: September 17, 2020, 03:24:27 am »

I only have a free license in a home learning / testing environment but thanks for the info.

Sent from my SM-N986U using Tapatalk

9

20.7 Legacy Series / Re: Call for testing: official netmap kernel

« on: September 17, 2020, 12:54:22 am »

With the new build, should Interfaces Selection for Protected Interfaces be LAN only or can I add vmx0_VLAN's and ovpns OpenVPN Server interfaces also. Wasn't sure if LAN covered them all or not.
-I do have internal DNS server running on a Domain Controller on the LAN. Not sure if that matters for config.

This is a VMWare ESXi 7 environment if the VMX didn't give it away

10

20.7 Legacy Series / Re: Call for testing: netmap on 20.7

« on: August 02, 2020, 01:17:15 am »

A quick update:

I think this vmx bug has been resolved on FreeBSD 12-STABLE:

https://svnweb.freebsd.org/base?view=revision&revision=363163

Let's do some tests and I'll post some results.

If anyone out there is able to test 12/STABLE kernel with an ESX vmx interface, that'd also be great

I have ESXi 7.0 with Netmap crashing using vmxnet3 with Intrusion Detection and Sensei enabled. So if you think this test would fix it, I could give it a try. Let me know how to test.

11

20.7 Legacy Series / Crashing

« on: August 01, 2020, 05:15:17 am »

I found I was getting kernel panics and reboots when either Sensei was running or Intrusion Detection was enabled on my VMWare ESXi 7 OPNSense VM with vmx drivers for ethernet.

I know the Sensei one seems to be known, but not sure on the known IDS one with vmx on vmware 7.

12

Tutorials and FAQs / High Availability (CARP) on vSphere 7

« on: June 19, 2020, 10:04:50 pm »

I was just wondering if anyone has any good setup tutorials for an OPNSense HA Setup on vSphere 7?

If possible, can the CARP interface go over a local vSphere distributed switch without having to use a real physical interface?

13

19.7 Legacy Series / Re: dynDNS does not work after upgrade

« on: August 15, 2019, 03:59:33 pm »

Same here:
[14-Aug-2019 18:00:27 America/New_York] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/etc/inc/plugins.inc.d/dyndns/phpDynDNS.inc on line 758

14

19.1 Legacy Series / Re: Wol widget error after Update to 19.1.5

« on: April 14, 2019, 07:54:42 pm »

No, I can't reproduce this on 19.1.6 -- not with empty rules, not with one, not with many. What am I missing?


Cheers,
Franco

I am not sure... I also have the A Problem Has Been Detected pop-up on the dashboard with this:

[13-Apr-2019 10:26:32 America/New_York] Exception: Error at /usr/local/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php:137 - count(): Parameter must be an array or an object that implements Countable (errno=2) in /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php:85
Stack trace:
#0 [internal function]: OPNsense\Base\ApiControllerBase->APIErrorHandler(2, 'count(): Parame...', '/usr/local/opns...', 137, Array)
#1 /usr/local/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php(137): count(Array)
#2 [internal function]: OPNsense\IDS\Api\SettingsController->searchInstalledRulesAction()
#3 [internal function]: Phalcon\Dispatcher->callActionMethod(Object(OPNsense\IDS\Api\SettingsController), 'searchinstalled...', Array)
#4 [internal function]: Phalcon\Dispatcher->dispatch()
#5 /usr/local/opnsense/www/api.php(26): Phalcon\Mvc\Application->handle()
#6 {main}


Also, I am using these if it makes a difference:

os-etpro-telemetry (installed)   1.3_1   42.5KiB   ET Pro Telemetry Edition

et_telemetry.token:  *******
snort_vrt.oinkcode: *******
snort_vrt.rulesfile: snortrules-snapshot-2990.tar.gz

15

19.1 Legacy Series / Re: Wol widget error after Update to 19.1.5

« on: April 13, 2019, 04:28:27 pm »

Hi mark,

19.1.6 is out addressing most and disabling warnings for now. Kinda unfortunate, but it is what it is.


Thanks,
Franco

Hey Franco, is this related to this?

Error at /usr/local/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php:137 - count(): Parameter must be an array or an object that implements Countable (errno=2)

Error shows up in 19.1.6 when going to Services - > Intrusion Detection -> Administration -> Rules Tab.